Microsoft 365 - Potential Ransomware Activity — Detection Rule

Detects when a Microsoft Cloud App Security reported when a user uploads files to the cloud that might be infected with ransomware.

Read the full analysis on IntelFusions